This is a malicious application that eavesdrops on users, please check your phone and remove it immediately

This application is hidden inside some applications on Google Play, once installed, it will try to hide on the victim's device with a gear icon, making users mistakenly believe that this is part of the system.

According to Lab52, this malicious code was previously linked to Turla, a famous hacker group believed to be supported by the Russian state. This group specializes in using custom malware to target European and American systems, mainly for espionage.

This is a malicious application that eavesdrops on users, please check your phone and remove it immediately Picture 1

This is a malicious application that eavesdrops on users, please check your phone and remove it immediately Picture 2

After being installed and granted system permissions, the application will steal the victim's data, eavesdrop and track the user's location.

On first launch, this malicious app will claim access to location, network status, camera, contacts, external storage, call logs, Foreground service, messages, recordings. . to collect the device's location, send and read texts, access memory, take photos/videos with the camera, and record audio.

After being granted the above permissions, this spyware will remove the icon from the screen and silently run in the background making it very difficult for users to detect.

This is a malicious application that eavesdrops on users, please check your phone and remove it immediately Picture 3

This malware was discovered lurking in the Roz Dhan: Earn Wallet cash app on the Google Play Store.

If you have installed it by mistake, please remove this application immediately by going to Settings -> Apps -> Manage apps, find the malicious application name - > click Uninstall.

Lesley Montoya

Update 06 April 2022

You should read it

May be interested

How to remove malicious software (malware) on Android applications?
on android devices, every time you open the app up you see the popup popup window appear. you cannot close these advertising windows. in this case it is very likely that the ads on your application containing malicious software (malware) can be harmful to your android device.
Rooted MySearch123.com on Chrome, Firefox and Internet Explorer browsers
technically mysearch123.com is not a virus that is classified as a malicious software program (unwanted program (pup)) that can contain and install malicious programs on the computer. your, like adware, toolbars or viruses.
The best Android battery bottle test application
if you find your android phone has signs like a battery falling fast, to spend a lot of space overnight, charging is not full, ... it's time for you to check the battery level on android. this job is essential for you to know the time of use as well as the health status of the phone battery you are using.
How to check Android status using Phone Doctor Plus
phone doctor plus is an application for android devices with a function to check the hardware system, thereby helping users to assess the performance of the device.
23 malicious apps that steal Facebook and Instagram accounts and blackmail users, need to be removed immediately
zimperium security experts recently discovered a series of malicious applications that track android smartphone users to steal facebook, instagram, ... even blackmail device owners.
Check the quality of old phones before buying with TestM application
if you intend to own an old phone that is not familiar with the technology, you can install testm application for android or ios to test your old smartphone yourself before buying, and minimize the school. if you encounter an error, the machine does not guarantee the quality to the maximum.
164 applications you should remove from your phone immediately
recently, security researchers at white ops discovered 164 malicious apps on google play with more than 10 million downloads.
How to detect malicious apps on Android
installing applications outside of google play is often potentially risky, making users more likely to steal personal data and money. therefore, the detection of malicious applications on android phones will help you distinguish what will be a safe application, where the application contains malicious code, thereby minimizing the download of dangerous applications. security and protection of android devices become safer.
Instructions to remove unnecessary applications on Facebook
when installing an application on facebook, these applications will be allowed to exploit part of your personal information to meet different features. this will put your personal account in danger because it may contain malicious code, it will steal your account.
28 dangerous extensions you should immediately remove from Chrome and Microsoft Edge
these extesions can redirect users to advertising, phishing websites, crawling or downloading malicious code.

This is a malicious application that eavesdrops on users, please check your phone and remove it immediately

You should read it

May be interested

Security and Virus Removal